LastPass completes investigations into their most recent breaches and shares findings. You can read them below but we’ll detail them in coming days about necessary actions

https://blog.lastpass.com/2023/03/security-incident-update-recommended-actions/

Booking.com (function(d, sc, u) { var s = d.createElement(sc), p = d.getElementsByTagName(sc)[0]; s.type = ‘text/javascript’; s.async = true; s.src = u + ‘?v=’ + (+new Date()); p.parentNode.insertBefore(s,p); })(document, ‘script’, ‘//cf.bstatic.com/static/affiliate_base/js/flexiproduct.js’);

Study: Deepfakes continue to grow and become more sophisticated, APIs under increasing attack, and security job burnout remains high

https://www.darkreading.com/risk/deepfakes-grow-sophistication-cyberattacks-rise-ukraine-war

SANS OUCH! Newsletter addresses securing gaming online

https://www.sans.org/newsletters/ouch/securely-gaming-online/

I don’t normally comment but this is something that literally came up this week in one of the online games I play that has RL social interactions (voice via Discord and written chats in game), as well as Social Media “groups” or channels dedicated to a game. I found that I had inadvertently gravitated to a group of other IT professionals; some of which are in close proximity to my home and work place. After conversing about common work issues, it dawned on me that some shared waaaay too much. While we generally train youth about “sharing too much”, I think much needs to be said about adults doing the same thing and more so about IT professionals sharing too much. Yesterday, there was a global chat (which I normally have off) about IT security positions that several participants hold. The suspicious nature in me expects that several of these folks will be “friended”. One of the things that I tell my family is to be sensitive to the fact that many of us did (and some still do) work from home. Even though we are not using the same laptops, it usually is the same network. Gaming is a target rich environment. As the article points out, there are people already cheating there. It’s nothing to extend that “cheat” to other behavior. Be careful out there, including you adults!

Instead of preying on fears, bad actors are hoping to capitalize on the desires get away (travel)

Bad actors are usually all over current events when it comes to #phishing and #SocialEngineering attacks, in a different twist, they are now preying on those that have been itching to get out and travel. With all the talk about increasing vaccine rates and boosters, the field is ripe for shooting fish in a barrel. Palo Alto Unit 42 describes the trend they have seen. And with all the stolen data/credentials out there, bad actors are armed pretty well

https://unit42.paloaltonetworks.com/travel-themed-phishing/

TedTalk: Work life balance

Came across this TedTalk video from 10 years ago. A lot of people give lip service to the subject of Work Life Balance but he makes a great point about how to really achieve it and the impact it can have.